Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
PHP · widgets
9e1fe10e80e002f7…
58.3 KB
PHP · widgets/woo
5d20e8edd1484551…
48.2 KB
PHP · updater/vendor
8eb141fa55be71aa…
36.7 KB
PHP · updater/Puc/v5p6
7d031a02ca4f5bd9…
35.5 KB
FILE · package root
605e9047a563c5c8…
34.3 KB
PHP · widgets
ba222f72c28a9b5c…
30.6 KB
PHP · widgets/woo
1b08c80ffe9907a2…
28.5 KB
PHP · includes
c2bb4b1beea849ac…
24.3 KB
Code signals
1 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation4
Referenced hosts
15 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.